password recovery tools

24
Password Recovery Solutions Andrey Belenko Security Researcher, CISSP [email protected]

Upload: andrey-belenko

Post on 25-May-2015

3.404 views

Category:

Technology


0 download

TRANSCRIPT

Page 1: Password Recovery Tools

Password Recovery

Solutions

Andrey Belenko

Security Researcher, CISSP

[email protected]  

Page 2: Password Recovery Tools

More  than  15  years  in  Password  Recovery  

Agenda

 About us

 Types of passwords

 Hardware acceleration

 Distributed password recovery

 QQ passwords

  iPhone/iPod/iPad backup passwords

Page 3: Password Recovery Tools

More  than  15  years  in  Password  Recovery  

About us

 Established in 1990, privately held

 Based in Moscow, Russia

 Resellers worldwide

 Customers from Fortune 500, military and

governmental institutions

 Patent-pending technologies (GPU

acceleration, Thunder Tables)

 100+ file formats supported

h0p://www.elcomso-.com  

Page 4: Password Recovery Tools

Industry Certified and Acknowledged

  Microsoft Gold Certified Partner

  Intel Software Partner

  NVIDIA Registered Developer

  Member of the Association of

Shareware Professionals (ASP)

  Member of the Russian

Cryptology Association (RCA)

Page 5: Password Recovery Tools

Password Protection Types

"   Reversible passwords transformation

Instant recovery

Page 6: Password Recovery Tools

Instant Recovery

Page 7: Password Recovery Tools

Password Protection Types

"   Reversible passwords transformation

Instant recovery

"   One-way password transformation

Can reset password

Page 8: Password Recovery Tools

Password Reset

Page 9: Password Recovery Tools

Password Protection Types

"   Reversible passwords transformation

Instant recovery

"   One-way password transformation

Can reset password

"   Encrypted documents

Break encryption

Guess password

Page 10: Password Recovery Tools

Breaking Encryption

Page 11: Password Recovery Tools

Password Guessing

Page 12: Password Recovery Tools

Password Guessing

Page 13: Password Recovery Tools

Problems

•  «Salt»

– Rainbow tables don’t work

•  Strong crypto

– Key search attacks not possible

•  Iterated transformations

– Trying password takes longer

Key is to test smart and fast!

Page 14: Password Recovery Tools

How to Increase Speed?

• No  special  hardware  • Limited  speedup  (10-­‐20%)  

So-ware  OpFmizaFon  

• Convenient  to  use  • Not  very  cost-­‐effecFve  

Special  Hardware  

• Cost-­‐effecFve  • Might  require  user  experFse  

Common  Hardware  

• Scalable  • Difficult  to  manage  

Distributed  compuFng  

Page 15: Password Recovery Tools

Supported Hardware

GPU:

• NVIDIA GeForce

• NVIDIA Tesla

• ATI Radeon

• ATI FireStream

Page 16: Password Recovery Tools

Supported Hardware

Tableau TACC1441 (FPGA)

Page 17: Password Recovery Tools

Performance (WPA)

4000  

22000  

30000  

103000  

14500  

29000  

0   20000   40000   60000   80000   100000   120000  

Core  i7  920  

GTX  295  

GTX  480  

HD5970  

TACC1441  

2x  TACC1441  

Passwords  per  Second  

Page 18: Password Recovery Tools

Distributed Password Recovery

Internet/WAN

LAN

Controller

Server

Workers

Page 19: Password Recovery Tools

Distributed Password Recovery

•  Needs little traffic and bandwidth

•  Can work over LANs and WANs

•  Scales (almost) linearly with number of

nodes

•  Workers can join and leave

•  Nodes can use hardware acceleration

Page 20: Password Recovery Tools

QQ Passwords

•  Password is not stored in clear

•  QQ 2005 stores MD5 hash

•  QQ 2009 stores encrypted MD5 hash

– Encryption key depends on hardware

•  Can extract hash and run password

recovery

•  Use any tool for cracking MD5

•  Demo

Page 21: Password Recovery Tools

iPhone Backup Passwords

•  100 millions iPhone/iPod touch/iPad sold

•  iTunes backs up device regularly

•  Backup contains lots of valuable info

– Contacts, call logs, SMS, e-mail accounts

– Photos

– Location history

– Application files (cleartext password)

Page 22: Password Recovery Tools

iPhone Backup Passwords

•  Device can encrypt backups

•  Need original password to decrypt

•  Not same as passcode!

Elcomsoft & Oxygen provide solution for

handling encrypted backups!

Page 23: Password Recovery Tools

iPhone Password Breaker

•  Supports iPhone/iPod touch/iPad backups

•  Supports iOS 4 and iTunes 9.2

•  Wordlist and bruteforce attacks

•  Hardware acceleration with NVIDIA and

ATI GPUs and Tableau TACC1441

•  Use Oxygen Forensic Suite to decrypt and

analyze

Page 24: Password Recovery Tools

Thank You!